James Tucker 0fe0fe4524 net/dns: align Apple resolver scoping with search-domain behavior ...

Apple tunnels derive global search domains from match domains. Scope
simple iOS and sandboxed macOS configurations to the full MagicDNS route
set; keep custom split resolvers and uncovered forward/PTR records behind
a primary resolver. Respect scoping controls and reject unsafe fallback
when base DNS cannot be read.

Add mode-selection and reverse-coverage tests for both Apple platforms.

RELNOTE: Fix MagicDNS routing and split-DNS search scoping on Apple clients.

Updates tailscale/corp#48693

Change-Id: I50b5641db466f77c19f911255748e12a10d0a5fe
Signed-off-by: James Tucker <james@tailscale.com>

2026-09-29 16:11:57 -07:00

..

publicdns

net/dns/publicdns: don't upgrade Control D port-53-only addresses to DoH (#20463)

2026-07-17 15:33:17 -07:00

resolvconffile

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

resolver

net/dns/resolver: only accept UDP DNS replies from the queried resolver

2026-09-15 09:44:43 -07:00

config.go

net/dns: align Apple resolver scoping with search-domain behavior

2026-09-29 16:11:57 -07:00

dbus.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

debian_resolvconf.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

direct_linux_test.go

net/dns: fix TestDNSTrampleRecovery failure under flakestress

2026-04-14 06:55:35 -07:00

direct_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

direct_unix_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

direct.go

net/dns: restore SELinux context on /etc/resolv.conf after rename (#20167)

2026-06-18 16:36:56 -07:00

dns_clone.go

ipn/ipnlocal,net/dns/resolver: serve MagicDNS names from live indexes

2026-07-14 07:26:41 -07:00

dns_view.go

ipn/ipnlocal,net/dns/resolver: serve MagicDNS names from live indexes

2026-07-14 07:26:41 -07:00

flush_default.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

flush_windows.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

ini_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

ini.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

manager_apple_test.go

net/dns: align Apple resolver scoping with search-domain behavior

2026-09-29 16:11:57 -07:00

manager_darwin_test.go

net/dns: support global resolvers in macOS tailscaled

2026-07-02 12:21:54 -07:00

manager_darwin.go

net/dns: support global resolvers in macOS tailscaled

2026-07-02 12:21:54 -07:00

manager_default.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

manager_freebsd.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

manager_linux_test.go

net/dns: fix TestDNSTrampleRecovery failure under flakestress

2026-04-14 06:55:35 -07:00

manager_linux.go

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

manager_openbsd.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

manager_plan9_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

manager_plan9.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

manager_solaris.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

manager_tcp_test.go

net/dns: make MagicDNS IPv6 registration opt-out now, not opt-in

2026-02-17 07:29:12 -10:00

manager_test.go

net/dns: align Apple resolver scoping with search-domain behavior

2026-09-29 16:11:57 -07:00

manager_windows_test.go

net/dns, util/winutil: improve detection of group policy affecting NRPT

2026-07-10 13:53:26 -06:00

manager_windows.go

net/dns: only attempt registry changes on address families that are actually enabled on interface

2026-08-13 13:13:20 -06:00

manager.go

net/dns: align Apple resolver scoping with search-domain behavior

2026-09-29 16:11:57 -07:00

nm.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

noop.go

net/dns: skip DNS base config when using userspace networking (#18355)

2026-01-30 12:14:47 -05:00

nrpt_windows.go

net/dns, util/winutil: improve detection of group policy affecting NRPT

2026-07-10 13:53:26 -06:00

openresolv_test.go

net/dns: fix openresolv DNS config when no other snippets exist (#20996)

2026-08-27 14:42:26 -07:00

openresolv.go

net/dns: fix openresolv DNS config when no other snippets exist (#20996)

2026-08-27 14:42:26 -07:00

osconfig_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

osconfig.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

resolvconf-workaround.sh

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

resolvconf.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

resolvconfpath_default.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

resolvconfpath_gokrazy.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

resolvd.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

resolved_test.go

net/dns: validate resolved restart signals

2026-09-14 19:29:44 -07:00

resolved.go

net/dns: validate resolved restart signals

2026-09-14 19:29:44 -07:00

utf_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

utf.go

all: apply go fix

2026-07-10 17:39:16 -07:00

wsl_windows.go

net/dns: fix TestDNSTrampleRecovery failure under flakestress

2026-04-14 06:55:35 -07:00